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DESCRIPTION 

RIGHT MANAGEMENT DEVICE, TERMINAL DEVICE, AND RIGHT 
MANAGEMENT SYSTEM 



5 Technical Field 

[0001] The present invention relates to a content distribution 
system whereby digital content data such as video and music 
produced by a content provider is distributed from a server device of 
a service provider via communication or a broadcast so that a 

10 terminal device of an end user uses the digital content. Hereafter, 
this content distribution system may be referred to as a B2B2C 
(Business to Business to Consumer) system according to the 
circumstances. As mentioned above, the B2B2C system is an 
abbreviation indicating a relation among a content provider 

15 (Business) that creates products, a service provider (Business) that 
sells them, and an end user (Consumer) that purchases them. The 
present invention particularly relates to a right management 
terminal that is used for copyright protection for content in the 
B2B2C system. 

20 

Background Art 

[0002] In recent years, content distribution service, by which the 
digital content such as video and music (simply referred to as 
content, hereafter) is distributed from the server device to the 

25 terminal device via communication or a broadcast so that the 
terminal device uses the content, is entering its commercial stage. 
Meanwhile, it becomes easy to make unauthorized duplication of 
content due to the development of digital equipment. This 
increases problems associated with copyright infringement. On 

30 account of this, the content distribution service employs a copyright 
protection technology (DRM: Digital Rights Management) for the 
purpose of preventing the unauthorized usage of content. Using 
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the cryptographic technology and the authentication technology, the 
copyright protection technology allows only an authorized user to 
use content within a predetermined range. To be naore specific, the 
server device of the content provider encrypts the content, then 
5 distributes the encrypted content to the terminal device of the end 
user. Moreover, the terminal device obtains a sales license that 
Includes a content key to decrypt the encrypted content and a usage 
condition of the content (such as the number of usage times and a 
period of validity) from the server device of the service provider. In 

10 accordance with the usage condition included in the received sales 
license, the terminal device decrypts the encrypted content to use 
the content. By means of the method described so far, the content 
is protected and the unauthorized usage of the content is prevented. 
[0003] Here, since the above-mentioned sales license is generated 

15 by the server device of the service provider, the information inside 
the license such as the content key and the usage condition is set by 
the service provider. Meanwhile, because the service provider 
needs to use the content key that was made by the content provider 
in the encryption processing performed on the content, the content 

20 key can be considered as the information that can be substantially 
controlled by the content provider. In addition, by means of the 
method as disclosed In a patent reference 1, even though the 
content provider controls the content key, the service provider can 
edit the content received from the content provider and distribute 

25 the edited, encrypted content to the terminal device of the end user. 
Patent Reference 1: Japanese Application Patent Publication No. 
8-329011 

Disclosure of Invention 
30 Problems that Invention is to Solve 

[0004] As to the usage condition, there are contractual limitations 
In writing between the content provider and the service provider. 



-2 - 



However, the usage condition is information that is basically set by 
the service provider. Therefore, the content provider cannot 
control the details of the usage condition set by the service provider. 
[0005] The present invention was conceived in view of the problem 
5 described above and has an object of providing a right management 
device that allows a sales license to be sold to the end user only 
when the usage condition is set within the range approved by the 
content provider. 

10 Means to Solve the Problems 

[0006] In order to achieve the above object, a right management 
system of the present invention is a right management system for 
managing license Information that allows usage of content, being 
made up of: a license information generation unit operable to 

15 generate the license information including a usage condition that 
shows a condition for allowing the usage; a range designation 
obtainment unit operable to obtain information showing range 
designation of the usage condition from a content provider that 
produces the content; a usage condition judgment unit operable to 

20 judge whether or not the usage condition included in the generated 
license information is within the designated range; and a validation 
unit operable to validate the generated license information only 
when the usage condition is judged to be within the range as a result 
of the judgment. 

25 [0007] Moreover, in order to achieve the above object, a right 
management device of the present invention Is a right management 
device for managing license information that allows usage of 
content, being made up of: a license information generation unit 
operable to generate the license information including a usage 

30 condition that shows a condition for allowing the usage; a range 
designation reception unit operable to receive information showing 
a range of the usage condition from a right management device 



provided for a content provider that produces the content; a usage 
condition judgment unit operable to judge whether or not the usage 
condition included in the generated license information is within the 
designated range; and a validation unit operable to validate the 

5 generated license information only when the usage condition is 
judged to be within the range as a result of the judgment. 
[0008] As described, the right management device of the service 
provider has a function of validating the license information only 
when the usage condition satisfies the designated range. 

10 Accordingly, the content provider can control the details of the 
usage condition of the sales license generated by the service 
provider. 

[0009] Furthermore, in order to achieve the above object, the 
terminal device of the present invention is a terminal device of an 

15 end user for reproducing content in accordance with license 
information that allows usage of the content, being made up of: a 
request unit operable to request the license information used for 
reproducing a specific content from a right management device of a 
service provider; a license information obtainment unit operable to 

20 obtain in response to the request: the license information including 
a usage condition that shows a condition for allowing the usage of 
the content; and range designation information designating a range 
of the usage condition; a usage condition judgment unit operable to 
judge whether or not the usage condition included in the obtained 

25 license information is within the range designated in the range 
designation information; and an abandon unit operable to abandon 
the obtained license information when the usage condition is judged 
not to be within the range designated in the range designation 
information as a result of the judgment. 

30 [0010] In addition, since the terminal device of the end user also 
abandons the license information that does not satisfy the 
designated range, the end user cannot use the content by utilizing 
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such license information. Accordingly, double checking is 
conducted by the service provider and the end user. This allows the 
content provider to more reliably control the details of the usage 
condition of the license information generated by the service 
5 provider. 

[0011] It should be noted here that the present invention may be 
realized not only as the right management device and the terminal 
device, but also as: a right management program that causes a 
computer to realize the characteristic units provided in such a right 

10 management device and a terminal device as its function; a right 
management method that has steps corresponding to the 
characteristic units provided in such a right management device and 
a terminal device; and a medium that Includes data used by the 
characteristic units provided in such a right management device and 

15 a terminal device. Also, it should be understood that such a 
program can be distributed via a record medium such as a CD-ROM, 
or via a transmission medium such as the Internet. 

Effects of the Invention 

20 [0012] The present invention allows the content provider to set 
such a condition as to edit the details of the usage condition of the 
sales license generated by the service provider. Also, the present 
invention eliminates the problem that the service provider may sell 
a sales license in which the content provider has no intention and 

25 the end user ends up using such a sales license. 

Brief Description of Drawings 

[0013] [FIG. 1] FIG. 1 is a schematic diagram showing an entire 
structure of a B2B2C system of the present embodiment. 
30 [FIG. 2] FIG. 2 is a diagram showing a system structure of a 

content provider shown in FIG. 1. 

[FIG. 3] FIG. 3 is a diagram showing a system structure of a 
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service provider shown in FIG. 1. 

[FIG. 4] FIG. 4 is a diagrann sfiowing a module structure of an 
original license generation tool shown in FIG. 2. 

[FIG. 5] FIG. 5 is a diagram showing a module structure of a 
5 content encryption tool shown in FIG. 2. 

[FIG. 6] FIG. 6 is a diagram showing a module structure of a 
CP license contract server shown in FIG. 2. 

[FIG. 7] FIG. 7 is a diagram showing a table structure of a 
contract DB (Database) shown in FIG. 6. 
10 [FIG. 8] FIG. 8 is a diagram showing a module structure of a 

CP license management server shown in FIG. 2. 

[FIG. 9] FIG. 9 is a diagram showing a table structure of a 
user DB shown in FIG. 8. 

[FIG. 10] FIG. 10 is a diagram showing a table structure of a 
15 license DB shown in FIG. 8. 

[FIG. 11] FIG. 11 is a diagram showing a module structure of 
a CP membership management server shown in FIG. 2. 

[FIG. 12] FIG. 12 is a diagram showing a table structure of a 
membership DB shown in FIG. 11. 
20 [FIG. 13] FIG. 13 is a diagram showing a module structure of 

a CP content management server shown in FIG. 2. 

[FIG. 14] FIG. 14 is a diagram showing a table structure of a 
content DB shown in FIG. 13. 

[FIG. 15] FIG. 15 is a diagram showing a module structure of 
25 a sales license generation tool shown in FIG. 3. 

[FIG. 16] FIG. 16 is a diagram showing a module structure of 
an SP terminal application program shown in FIG. 3. 

[FIG. 17] FIG. 17 is diagram showing a module structure of 
an SP license sales server shown in FIG. 3. 
30 [FIG. 18] FIG. 18 is a diagram showing a table structure of a 

sales DB shown in FIG. 17. 

[FIG. 19] FIG. 19 is a diagram showing a module structure of 
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an SP license management server shown in FIG. 3. 

[FIG. 20] FIG. 20 is a diagram sliowing a table structure of a 
license DB shown in FIG. 19. 

[FIG. 21] FIG. 21 is a diagram showing a table structure of a 
5 user DB shown in FIG. 19. 

[FIG. 22] FIG. 22 is a diagram showing a module structure of 
an SP membership management server shown in FIG. 3. 

[FIG. 23] FIG. 23 is a diagram showing a table structure of a 
membership DB shown in FIG. 22. 
10 [FIG. 24] FIG. 24 is a diagram showing a module structure of 

an SP content distribution server shown in FIG. 3. 

[FIG. 25] FIG. 25 is a diagram showing a table structure of a 
content DB shown in FIG. 24. 

[FIG. 26] FIG. 26 is a sequence diagram for content 
15 encryption processing performed by the content encryption tool 
shown in FIG. 5. 

[FIG. 27] FIG. 27 is a sequence diagram for original license 
generation processing performed by the original license generation 
tool shown in FIG. 4. 
20 [FIG. 28] FIG. 28 shows an entry screen of a user entry I/F 

(Interface) of the original license generation tool shown in FIG. 4. 

[FIG. 29] FIG. 29 is a diagram showing a data structure of an 
original license. 

[FIG. 30] FIG. 30 is a sequence diagram for a communication 
25 procedure of service sign-up processing performed between the 
service provider and the content provider. 

[FIG. 31] FIG. 31 is a sequence diagram for license contract 
processing. 

[FIG. 32] FIG. 32 is a sequence diagram for original license 
30 obtainment processing. 

[FIG. 33] FIG. 33 is a diagram showing a data structure of 
the original license after the license processing shown in FIG. 32 was 
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performed. 

[FIG. 34] FIG. 34 is a sequence diagram for encrypted 
content obtainment processing. 

[FIG. 35] FIG. 35 is a sequence diagram for original license 
5 information reference processing. 

[FIG. 36] FIG. 36 is a diagram showing a data structure of 
original license information. 

[FIG. 37] FIG. 37 shows an entry screen of the sales license 
generation tool shown in FIG. 2. 
10 [FIG. 38] FIG. 38 is a sequence diagram for sales license 

generation processing. 

[FIG. 39] FIG. 39 is a diagram showing a screen in which an 
edit condition is Inputted in the entry screen of the sales license 
generation tool shown in FIG. 2. 
15 [FIG. 40] FIG. 40 is a diagram showing a data structure of a 

sales license (having no content key). 

[FIG. 41] FIG. 41 is a diagram showing a data structure of a 
sales license (having a content key). 

[FIG. 42] FIG. 42 is a diagram showing timing in comparing 
20 the usage condition and the edit condition. 

[FIG. 43] FIG. 43 is a diagram showing a case where the 
timing in comparing the usage condition and the edit condition is 
when the sales license is Issued, 

[FIG. 44] FIG. 44 is a diagram showing a case where the 
25 timing In comparing the usage condition and the edit condition Is 
when the sales license Is received. 

[FIG. 45] FIG. 45 is a diagram showing a case where the 
timing in comparing the usage condition and the edit condition is 
when the content is used. 
30 [FIG. 46] FIG. 46 is a diagram showing an example of a case 

where the number of sales licenses is limited in accordance with the 
edit result of the sales license. 
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[FIG. 47] FIG. 47 is a diagram showing a data flow of a case 
where comparison-judgment processing is performed on the edit 
condition by both the SP and the EU. 

[FIG. 48] FIG. 48 is a block diagram showing a structure of a 
5 terminal device of the end user. 

[FIG. 49] FIG. 49 is a diagram showing timing in comparing 
the usage condition and the edit condition. 
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Best Mode for Carrying Out the Invention 

[0015] The following is a detailed explanation of an embodiment of 
the present invention, with reference to the drawings. 
5 [0016] (Explanation of Rough Entire Structure) 

FIG. 1 is a schematic diagram showing an entire structure of 
a B2B2C system related to the embodiment of the present invention. 
As shown in FIG. 1, the present B2B2C system is composed of a 
content provider 11, a service provider 21, and an end user 31. The 
10 content provider 11 and the service provider 21 are connected via a 
transmission line A41. The service provider 21 and a terminal 
device owned by the end user 31 are connected via a transmission 
line B51. 

[0017] Here, the content provider 11 refers to a provider that 
15 produces content. The service provider 21 refers to a provider that 
obtains the content from the content provider 11 under a contract 
and sells the content to the end user 31. The end user 31 refers to 
a consumer who purchases the content from the service provider 21 
and uses it. 

20 [0018] The present Invention relates primarily to processing 
performed between the content provider 11 and the service provider 
21 of this B2B2C system. Thus, In the following description, 
detailed explanations are given as to the content provider 11 and 
the service provider 21. 

25 [0019] (Explanation of System Structure) 

First, system structures of respective subsystems of the 
content provider 11 and the service provider 21 are shown using 
FIGs. 2 and 3. 

[0020] (System Structure of Subsystem of Content Provider 11) 
30 FIG. 2 is a diagram showing the system structure of the 

subsystem of the content provider 11. As shown in FIG. 2, the 
subsystem of the content provider 11 is composed of an original 
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license generation tool 111, a content encryption tool 112, a CP 
license contract server 113, a CP license management server 114, a 
CP membership management server 115, and a CP content 
management server 116. 
5 [0021] Here, the original license generation tool 111 is a tool that 
generates an original license (referred to as a ''contract license" in 
Claims) to be provided for the service provider 21 after signing a 
license contract with the service provider 21. The content 
encryption tool 112 is a tool that performs the encryption processing 

10 on non-encrypted content using a designated content key to 
generate the encrypted content. The CP license contract server 
113 is a server that plays a role in receiving a license contract 
request from the service provider 21, performing processing 
relating to the license contract, and returning a response to show 

15 whether or not the license contract is allowed- The CP license 
management server 114 Is a server that plays a role in receiving a 
license obtainment request from the service provider 21 and 
returning the appropriate original license. The CP membership 
management server 115 is a server that plays a role in receiving a 

20 service sign-up request from the service provider 21, performing 
processing relating to the service sign-up, and returning a response 
to show whether or not the sign-up is allowed. Finally, the CP 
content management server 116 is a server that plays a role in 
receiving an encrypted content obtainment request from the service 

25 provider 21 and returning the appropriate encrypted content. 

[0022] It should be noted that the above-mentioned original 
license is data that is composed of: a content key to be used for 
decrypting the encrypted content; a template of a sales license with 
which the service provider 21 provides the end user 31; an edit 

30 condition based on which the template of the sales license can be 
edited; and a sales condition relating to the edited sales license. 
An example of a data structure of the original license will be 
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explained in detail later on with reference to the drawing. 
[0023] (Systenn Structure of Subsystem of Service Provider 21) 

FIG. 3 is a diagram showing the system structure of the 
subsystem of the service provider 21. As shown in FIG. 3, the 
5 subsystem of the service provider 21 is composed of a sales license 
generation tool 211, an SP terminal application program 212, an SP 
license sales server 213, an SP license management server 214, an 
SP membership management server 215, and an SP content 
distribution server 216. 

10 [0024] Here, the sales license generation tool 211 is a tool that 
edits the template of the sales license included in the original license 
in accordance with the details instructed by the user of the present 
tool and that generates a sales license (having no content key) that 
includes no content key. The SP terminal application program 212 

15 is an application program that sends requests for a service sign-up 
and a license contract to the content provider 11 and that directs the 
SP license management server 214 and the SP content distribution 
server 216 to respectively obtain the original license and the 
encrypted content from the content provider 11. The SP license 

20 sales server 213 is a server that plays a role in receiving a license 
purchase request from the end user 31, performing processing 
relating to the license purchase, and returning a response to show 
whether or not the license purchase is allowed. The SP license 
management server 214 is a server that plays a role in comparing 

25 the usage condition of the sales license (having no content key) 
generated by the sales license generation tool 211 with the edit 
condition of the original license based on which the present sales 
license (having no content key) was generated and, only when 
judging that the usage condition is within the range of the edit 

30 condition, inserting a content key into the sales license (having no 
content key) to generate a sales license (having a content key). 
Moreover, the SP license management server 214 plays a role in 
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returning the appropriate sales license (having a content key) in 
response to a license obtainment request from the end user 31. 
The SP membership management server 215 is a server that plays a 
role in receiving a service sign-up request from the end user 31, 
5 performing processing relating to the service sign-up, and returning 
a response to show whether or not the service sign-up is allowed. 
Finally, the SP content distribution server 216 is a server that plays 
a role in obtaining the encrypted content from the content provider 
11 and returning the appropriate encrypted content in response to 

10 an encrypted content obtainment request from the end user 31. 
[0025] It should be noted that an example of a data structure of 
the above-mentioned sales license will be explained in detail later on, 
with reference to the drawing. 
[0026] (Explanation of Module Structure) 

15 Next, the module structure of each tool and each server 

included in the subsystem of the content provider 11 shown in FIG. 
2 is explained with reference to FIGs. 4 to 14. 

[0027] (Module Structure of Original License Generation Tool 111) 
First, FIG. 4 is a diagram showing the module structure of 
20 the original license generation tool 111. As shown in FIG. 4, the 
original license generation tool 111 Is composed of a user entry I/F 
1111, a control unit 1112, an original license generation processing 
unit 1113, and a DB registration I/F 1114. 

[0028] Here, the user entry I/F 1111 plays a role in receiving a 
25 request from a user (assumed to be a system manager or an 
operator of the content provider 11) of the original license 
generation tool 111. The control unit 1112 is a module that 
controls the processing to be performed in response to the request 
received by the user entry I/F 1111. The original license 
30 generation processing unit 1113 is a module that generates an 
original license in accordance with the condition designated by the 
control unit 1112. Finally, the DB registration I/F 1114 is a module 
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that requests the generated original license should be registered 
into a database (simply referred to as a DB hereafter) of the CP 
license management server 114. Moreover, the DB registration I/F 
1114 plays a role in requesting that an original license ID which is an 
5 identifier to uniquely identify the original license and meta 
information which shows the sales condition and the edit condition 
of the original license should be registered into the DB of the CP 
license contract server 113- 

[0029] (Module Structure of Content Encryption Tool 112) 

10 FIG. 5 is a diagram showing the module structure of the 

content encryption tool 112. As shown in FIG. 5, the content 
encryption tool 112 is composed of a user entry I/F 1121, a control 
unit 1122, a content encryption processing unit 1123, and a DB 
registration I/F 1124. 

15 [0030] Here, the user entry I/F 1121 plays a role in receiving a 
request from the user (assumed to be the system manager or the 
like of the content provider 11) of the content encryption tool 112. 
The control unit 1122 is a module that controls the processing to be 
performed In response to the request received by the user entry I/F 

20 1121. The content encryption processing unit 1123 is a module 
that performs the encryption processing on the non-encrypted 
content using the content key designated by the control unit 1122 to 
generate the encrypted content. Finally, the DB registration I/F 
1124 is a module that requests the encrypted content, a content ID 

25 uniquely identifying the encrypted content, and the meta 
information showing a title of the content and so forth should be 
registered into a DB of the CP content management server 116. 
[0031] (Module Structure of CP License Contract Server 113) 

FIG. 6 is a diagram showing the module structure of the CP 

30 license contract server 113. As shown in FIG. 6, the CP license 
contract server 113 is composed of a DB I/F 1131, a contract DB 
1132, a communication processing unit 1133, a control unit 1134, 
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and a DB registration I/F 1135. 

[0032] Here, the DB I/F 1131 is a module that manipulates the 
appropriate data stored in the contract DB 1132 in accordance with 
DB manipulation requests (such as data registration and data 
5 search) from the control unit 1134 and the original license 
generation tool 111. FIG. 7 is a diagram showing a table structure 
of the contract DB shown in FIG. 6. The contract DB 1132 is a DB 
that has the table structure as shown in FIG. 7 and manages the 
original license ID and the meta Information relating to the sales 

10 condition of the original license. Note that the primary key refers 
to, for example, an original license ID that is uniquely set In the 
contract DB 1132 shown In the present figure. The primary key is 
the same In the other figures. The communication processing unit 
1133 is a module that receives a license contract request from the 

15 SP terminal application program 212 of the service provider 21 and 
returns a license contract response. The control unit 1134 is a 
module that controls the processing to be performed in response to 
the license contract request received by the communication 
processing unit 1133. Finally, the DB registration I/F 1135 is a 

20 module that requests the original license ID concerned with the 
license contract and the user ID uniquely identifying the service 
provider 21 that signed the contract should be registered into the DB 
of the CP license management server 114. 

[0033] (Module Structure of CP License Management Server 114) 
25 FIG. 8 is a diagram showing the module structure of the CP 

license management server 114. As shown in FIG. 8, the CP license 
management server 114 is composed of a DB I/F 1141, a user DB 
1142, a license DB 1143, a communication processing unit 1144, a 
control unit 1145, and a license processing unit 1146. 
30 [0034] Here, the DB I/F 1141 plays a role in manipulating the 
appropriate data stored in the user DB 1142 and the license DB 1143 
in accordance with DB manipulation requests from the control unit 
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1134, the original license generation tool 111, the CP license 
contract server 113, and the CP membership management server 
115. FIG. 9 is a diagram showing a table structure of the user DB 
shown in FIG. 8. The user DB 1142 is a DB that has the table 
5 structure as shown in FIG. 9 and manages the user ID uniquely 
Identifying the service provider 21 and the original license ID for 
which the service provider 21 signed up. FIG. 10 is a diagram 
showing a table structure of the license DB shown in FIG. 8. 
Meanwhile, the license DB 1143 is a DB that has the table structure 

10 as shown in FIG. 10 and manages the original license data 
corresponding to the original license ID. The communication 
processing unit 1144 is a module that receives a license obtainment 
request from the SP license management server 214 of the service 
provider 21 and returns a license obtainment response including the 

15 appropriate original license. The control unit 1145 is a module that 
controls the processing to be performed in response to the license 
obtainment request received by the communication processing unit 
1144. Finally, the license processing unit 1146 is a module that 
attaches a signature of the CP license management server 114 to 

20 the original license to be issued to the SP license management 
server 214 and that encrypts the part of the content key. 
[0035] (Module Structure of CP Membership Management Server 
115) 

FIG. 11 is a diagram showing the module structure of the CP 
25 membership management server 115. As shown In FIG. 11, the CP 
membership management server 115 is composed of a DB I/F 1151, 
a membership DB 1152, a communication processing unit 1153, a 
CP license management server 114, and a DB registration I/F 1155. 
[0036] Here, the DB I/F 1151 plays a role in manipulating the 
30 appropriate data stored in the membership DB 1152 in accordance 
with a DB manipulation request from the control unit 1154. FIG. 12 
is a diagram showing a table structure of the membership DB shown 
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in FIG. 11. The membership DB 1152 is a DB that has the table 
structure as shown in FIG. 12 and manages the user ID uniquely 
identifying the service provider 21 and the associated user 
information. Here, the user information refers to information that 
5 includes an account ID, a password, and a name and an address of 
the service provider. The communication processing unit 1153 is a 
module that receives a service sign-up request from the SP terminal 
application program 212 of the service provider 21 and returns a 
service sign-up response. The control unit 1154 is a module that 

10 controls the processing to be performed in response to the service 
sign-up request received by the communication processing unit 
1153. Finally, the DB registration I/F 1155 is a module that 
requests the user ID of the service provider 21 completing the 
sign-up should be registered into the DB of the CP license 

15 management server 114. 

[0037] ((Module Structure of CP Content Management Server 116) 
FIG. 13 is a diagram showing a module structure of the CP 
content management server 116. As shown in FIG. 13, the CP 
content management server 116 is composed of a DB I/F 1161, a 

20 content DB 1162, a communication processing unit 1163, and a 
control unit 1164. 

[0038] Here, the DB I/F 1161 plays a role in manipulating the 
appropriate data stored in the content DB 1162 in accordance with 
DB manipulation requests from the control unit 1164 and the 

25 content encryption tool 112. FIG. 14 is a diagram showing a table 
structure of the content DB shown in FIG. 13. The content DB 1162 
is a DB that has the table structure as shown in FIG. 14 and manages 
the content ID uniquely identifying the content, the encrypted 
content data, the content key data, and the meta information 

30 showing a title of the content and so forth. The communication 
processing unit 1163 is a module that receives an encrypted content 
obtainment request from the SP content distribution server 216 of 
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the service provider 21 and returns an encrypted content 
obtainment response including the appropriate encrypted content. 
Finally, the control unit 1164 is a module that controls the 
processing to be performed in response to the encrypted content 
5 obtainment request received by the communication processing unit 
1163. 

[0039] Following the explanation about the module structure of 
each tool and each server of the subsystem of the service provider 
21, the module structure of each tool and each server of the 
10 subsystem of the service provider 21 shown in FIG. 3 is shown with 
reference to FIGs. 15 to 25. 

[0040] (Module Structure of Sales License Generation Tool 211) 

First, FIG. 15 is a diagram showing the module structure of 
the sales license generation tool 211. As shown in FIG. 15, the 
15 sales license generation tool 211 is composed of a user entry I/F 
2111, a control unit 2112, a sales license generation processing unit 
2113, and a DB registration I/F 2114. 

[0041] Here, the user entry I/F 2111 plays a role in receiving a 
request from a user (assumed to be a system manager or the like of 

20 the service provider 21) of the sales license generation tool 211. 
The control unit 2112 Is a module that controls the processing to be 
performed in response to the request received by the user entry I/F 
2111. The sales license generation processing unit 2113 Is a 
module that edits the template of the sales license included in the 

25 appropriate original license in accordance with the instructions from 
the control unit 2112 to generate a sales license (having no content 
key) that includes no content key. Finally, the DB registration I/F 
2114 is a module that requests the generated sales license (having 
no content key) should be registered into the DB of the SP license 

30 management server 214. Moreover, the DB registration I/F 2114 
plays a role in requesting that a sales license ID which is an 
identifier uniquely identifying the sales license and the meta 
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information which shows the usage condition of the sales license and 
so forth should be registered into the DB of the SP license sales 
server 213. 

[0042] (Module Structure of SP Terminal Application Program 212) 
5 FIG- 16 is a diagram showing the module structure of the SP 

terminal application program 212. As shown in FIG. 16, the SP 
terminal application program 212 is composed of a user entry I/F 
2121, a control unit 2122, a communication processing unit 2123, 
and a processing request I/F 2124. 

10 [0043] Here, the user entry I/F 2121 plays a role in receiving a 
request from the SP terminal application program 212 (assumed to 
be the system manager or the like of the service provider 21). The 
control unit 2122 is a module that controls the processing to be 
performed in response to the request received by the user entry I/F 

15 2121. The communication processing unit 2123 is a module that 
issues requests for a license contract and a service sign-up 
respectively to the CP license contract server 113 and the CP 
membership management server 115. Finally, the processing 
request I/F 2124 is a module that directs the SP license sales server 

20 213 and the SP content distribution server 216 respectively to 
obtain the original license for which the license contract was signed 
and to obtain the encrypted content. 

[0044] (Module Structure of SP License Sales Server 213) 

FIG. 17 is a diagram showing the module structure of the SP 
25 license sales server 213. As shown in FIG. 17, the SP license sales 
server 213 is composed of a DB I/F 2131, a sales DB 2132, a 
communication processing unit 2133, a control unit 2134, and a DB 
registration I/F 2135. 

[0045] Here, the DB I/F 2131 plays a role in manipulating the 
30 appropriate data stored in the sales DB 2132 in accordance with DB 
manipulation requests from the control unit 2134 and the sales 
license generation tool 211. FIG. 18 is a diagram showing a table 
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structure of the sales DB shown in FIG. 17. The sales DB 2132 Is a 
DB that has the table structure as shown In FIG. 18 and manages the 
sales license ID and the meta information relating to the usage 
condition of the sales license and so forth. The communication 
5 processing unit 2133 is a module that receives a license purchase 
request from the end user 31 and returns a license purchase 
response. The control unit 2134 is a module that controls the 
processing to be performed in response to the license purchase 
request received by the communication processing unit 2133. 
10 Finally, the DB registration I/F 2135 is a module that requests the 
sales license ID concerned with the license purchase and the user ID 
uniquely identifying the end user 31 who purchased the license 
should be registered into the DB of the SP license management 
server 214. 

15 [0046] (Module Structure of SP License Management Server 214) 
FIG. 19 is a diagram showing the module structure of the SP 
license management server 214 shown in FIG. 3. As shown in FIG. 
19, the SP license management server 214 is composed of a 
processing request I/F 2141, a CP-side control unit 2142, a CP-side 

20 communication processing unit 2143, a content key insertion 
processing unit 2144, a DB I/F 2145, a license DB 2146, a user DB 
2147, an EU-slde communication processing unit 2148, an EU-side 
control unit 2149, a license processing unit 214, and a 
registration-purpose DB I/F 214B. 

25 [0047] Here, the processing request I/F 2141 plays a role in 
receiving a sales license registration request and an original license 
obtainment request respectively from the sales license generation 
tool 211 and the SP terminal application program 212. The CP-side 
control unit 2142 is a module that controls the processing to be 

30 performed in response to the sales license registration request and 
the original license obtainment request received by the processing 
request I/F 2141. The CP-side communication processing unit 
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2143 is a module that issues a request for an original license 
obtainment to the CP license management server 114 in accordance 
with instructions from the CP-side control unit 2142. The content 
l<ey insertion processing unit 2144 Is a module that: compares the 
5 usage condition of the sales license (having no content key) 
received by the processing request I/F 2141 from the sales license 
generation tool 211 with the edit condition of the original license 
based on which the present sales license (having no content key) 
was generated; judges whether or not the usage condition is within 

10 the range of the edit condition; and only when judging that it is 
within the range, inserts the content key of the original license into 
the sales license (having no content key) to generate a sales license 
(having a content key) that includes the content key. The content 
key insertion processing unit 2144 is a tamper resistant module. 

15 The DB I/F 2145 is a module that manipulates the appropriate data 
stored in the license DB 2146 and the user DB 2147 in accordance 
with DB manipulation requests from the CP-side control unit 2142 
and the EU-side control unit 2149. FIG. 20 is a diagram showing a 
table structure of the license DB shown in FIG. 19. The license DB 

20 2146 is a DB that has the table structure as shown in FIG. 20 and 
manages the original license data corresponding to the original 
license ID and the sales license data corresponding to the sales 
license ID. FIG. 21 is a diagram showing a table structure of the 
user DB shown in FIG. 19. The user DB 2147 is a DB that has the 

25 table structure as shown in FIG. 21 and manages the user ID 
uniquely identifying the end user 31 and the sales license ID which 
the end user 31 purchased. The EU-side communication processing 
unit 2148 is a module that receives a license obtainment request 
from the end user 31 and returns a license obtainment response 

30 including the appropriate sales license (having a content key). The 
EU-side control unit 2149 is a module that controls the processing to 
be performed in response to the license obtainment request 
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received by the EU-side communication processing unit 2148. 
Finally, the license processing unit 214A is a module that performs 
the processing to attach a signature of the SP license management 
server 214 to the sales license (having a content key) which is to be 
5 issued to the end user 31. The registration-purpose DB I/F 214B 
plays a role in receiving a sales license ID registration request for 
the purchased sales license and a user information registration 
request respectively from the SP license sales server 213 and the SP 
membership management server 215. 

10 [0048] The explanation has been given in the present embodiment 
for a case where the content key insertion processing unit 2144 is a 
module that is included in the SP license management server 214 of 
the service provider 21. However, the SP license management 
server 214 and the CP license management server 114, as the 

15 modules included in the CP license management server 114 of the 
content provider 11, may carry out communication to play the 
above-mentioned role of the content key insertion processing unit 
2144. 

[0049] (Module Structure of SP Membership Management Server 
20 215) 

FIG. 22 is a diagram showing the module structure of the SP 
membership management server 215. As shown in FIG. 22, the SP 
membership management server 215 is composed of a DB I/F 2151, 
a membership DB 2152, a communication processing unit 2153, a 

25 control unit 2154, and a DB registration I/F 2155. 

[0050] Here, the DB I/F 2151 plays a role In manipulating the 
appropriate data stored in the membership DB 2152 in accordance 
with a DB manipulation request from the control unit 2154. FIG. 23 
is a diagram showing a table structure of the membership DB shown 

30 in FIG. 22. The membership DB 2152 is a DB that has the table 
structure as shown in FIG. 23 and manages the user ID uniquely 
identifying the end user 31 and the associated user information. 
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The communication processing unit 2153 is a module that receives a 
service sign-up request from the end user 31 and returns a service 
sign-up response. The control unit 2154 is a module that controls 
the processing to be performed in response to the service sign-up 
5 request received by the communication processing unit 2153. The 
DB registration I/F 2155 is a module that requests the user ID of the 
end user 31 who signed up for the service should be registered into 
the DB of the SP license management server 214. 
[0051] (Module Structure of SP Content Distribution Server 216) 

10 FIG. 24 is a diagram showing the module structure of the SP 

content distribution server 216. As shown in FIG. 24, the SP 
content distribution server 216 is composed of a processing request 
I/F 2161, a CP-side control unit 2162, a CP-side communication 
processing unit 2163, a DB I/F 2164, a content DB 2165, an EU-side 

15 communication processing unit 2166, and an EU-side control unit 
2167. 

[0052] Here, the processing request I/F 2161 plays a role in 
receiving an encrypted content obtainment request from the SP 
terminal application program 212. The CP-side control unit 2162 is 

20 a module that controls the processing to be performed in response 
to the encrypted content obtainment request received by the 
processing request I/F 2161. The CP-side communication 
processing unit 2163 is a module that issues a request for an 
encrypted content obtainment to the CP content management 

25 server 116. The DB I/F 2164 is a module that manipulates the 
appropriate data stored in the content DB 2165 in accordance with 
DB manipulation requests from the CP-side control unit 2162 and 
the EU-side control unit 2167. FIG. 25 is a diagram showing a table 
structure of the content DB shown in FIG, 24. The content DB 2165 

30 is a DB that has the table structure as shown in FIG. 25 and manages 
the content ID uniquely identifying the encrypted content, the 
encrypted content data, and the meta information showing a title of 
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the content and so forth. The EU-side comnnunication processing 
unit 2166 is a module that receives an encrypted content 
obtainment request from the end user 31 and returns an encrypted 
content obtainment response including the appropriate encrypted 
5 content. Finally, the EU-side control unit 2167 is a module that 
controls the processing to be performed in response to the 
encrypted content obtainment request received by the EU-side 
communication processing unit 2166. 

[0053] (Explanations of Sequences and Data Structures) 

10 The following are explanations of: each sequence of 

processing performed in the content provider 11; each sequence of 
processing performed in the service provider 21; and each sequence 
of processing performed between the content provider 11 and the 
service provider 21. Moreover, explanations will be given as to data 

15 structures of the original license and the sales license. 
[0054] (Sequence of Content Encryption Processing) 

First, FIG. 26 is a sequence diagram for the content 
encryption processing performed in the content provider 11. As 
shown in FIG. 26, the present processing is carried out by the 

20 content encryption tool 112 and the CP content management server 
116. A detailed explanation is given as follows. 
[0055] The content encryption tool 112 receives a content 
encryption request, from the user of the present tool, that includes 
non-encrypted content, a content key to be used in the encryption, 

25 and meta information regarding the content (S2601). Then, the 
content is encrypted using the content key, so that the encrypted 
content is generated (S2602). After this, the content key and the 
meta information received in S2601 and an encrypted content 
registration request S2603 including the encrypted content 

30 generated in S2602 are transmitted to the CP content management 
server 116. Receiving the encrypted content registration request 
S2603, the CP content management server 116 issues the content 
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ID uniquely identifying the encrypted content and records the 
content key, the meta infornnation, and the encrypted content into 
the DB in association with the present content ID (S2604). After 
completing the recording into the DB, the CP content management 
5 server 116 returns an encrypted content registration response 

52605 including the result to the content encryption tool 112. 
Receiving the encrypted content registration response S2605, the 
content encryption tool 112 shows a content encryption response 

52606 that shows the result of the present processing to the user. 
10 [0056] (Sequence of Original License Generation Processing) 

FIG. 27 is a sequence diagram for the original license 
generation processing performed in the content provider 11. As 
shown in FIG. 27, the present processing is carried out by the 
original license generation tool 111, the CP license contract server 
15 113, and the CP license management server 114. A detailed 
explanation is given as follows. 

[0057] FIG. 28 shows an entry screen of the user entry I/F of the 
original license generation tool shown in FIG. 4. Through an entry 
screen D2801 as shown in FIG. 28, the original license generation 

20 tool 111 receives an original license generation request S2701 that 
includes an original license ID (D2802), a content ID (S2803), a 
content key (D2804), a sales condition (D2805), and an edit 
condition (D2806). In accordance with the received information, 
the original license is generated (S2702). FIG. 29 is a diagram 

25 showing a data structure of the original license. The original 
license generated in S2702 has the data structure as shown in FIG. 
29. As shown in FIG, 29, the original license D2901 is data 
composed of: information D2902 that shows the content information, 
the sales condition, and the edit condition; and a template D2903 of 

30 the sales license. After generating the original license, the original 
license generation tool 111 requests the CP license contract server 
113 to register the meta information showing the sales and edit 
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conditions of the original license in association with the original 
license ID (S2703). Receiving the meta information registration 
request S2703, the CP license contract server 113 records the meta 
information into the DB in association with the original license ID 

5 (S2704). After completing the recording into the DB, the CP license 
contract server 113 returns a meta information registration 
response S2705 including the result to the original license 
generation tool 111. Next, receiving the meta information 
registration response S2705, the original license generation tool 

10 111 requests the CP license management server 114 to register the 
original license in association with the original license ID (S2706). 
Receiving the original license registration request S2706, the CP 
license management server 114 records the original license into the 
DB in association with the original license ID (S2707). After 

15 completing the recording into the DB, the CP license management 
server 114 returns an original license registration response S2708 
including the result to the original license generation tool 111. 
Receiving the original license registration response S2708, the 
original license generation tool 111 shows the user an original 

20 license generation response S2709 that indicates the result of the 
present processing. 

[0058] (Sequence of Service Sign-Up Processing) 

FIG. 30 is a sequence diagram for the service sign-up 
processing performed between the content provider 11 and the 

25 service provider 21. As shown In FIG. 30, the present processing is 
carried out by the CP license management server 114, the CP 
membership management server 115, and the SP terminal 
application program 212. It should be noted that the service 
sign-up described here refers to a sign-up which the service 

30 provider 21 places for the service provided by the content provider 
11. A detailed explanation is given as follows. 
[0059] The SP terminal application program 212 accesses a home 
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page or the like of the CP membership management server 115 
designated by the user and receives user information, such as an 
account ID, a password, and a name and an address of the service 
provider, that is required for the service sign-up (S3001). After 
5 this, the SP terminal application program 212 sends a service 
sign-up request S3002 including the entered user information to the 
CP membership management server 115. Receiving the service 
sign-up request (S3002), the CP membership management server 
115 issues the user ID uniquely identifying the service provider 21 

10 (S3003) and records the issued user ID into the DB in association 
with the received user information (S3004). After completing the 
recording into the DB, the CP membership management server 115 
requests the CP license management server 114 to register the 
issued user ID into the DB (S3005). Receiving the user ID 

15 registration request S3005, the CP license management server 114 
records the specified user ID into the DB (S3006) and returns a user 
ID registration response S3007 including the result to the CP 
membership management server 115. After obtaining the user ID 
registration response S3007, the CP membership management 

20 server 115 sends a service sign-up response S3008 including the 
user ID to the SP terminal application program 212. Receiving the 
service sign-up response S3008, the SP terminal application 
program 212 shows the result of the service sign-up to the user 
(S3009). 

25 [0060] (Sequence of License Contract Processing) 

FIG. 31 is a sequence diagram for the license contract 
processing performed between the content provider 11 and the 
service provider 21. As shown in FIG. 31, the present processing is 
carried out by the CP license contract server 113, the CP license 

30 management server 114, and the SP terminal application program 
212. It should be noted that the license contract described here 
refers to a contract which is placed by the service provider 21 for an 
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original license provided by the content provider 11. A detailed 
explanation is given as follows. 

[0061] The SP terminal application program 212 accesses a home 
page or the like of the CP license contract server 113 designated by 
5 the user and receives a user ID and an original license ID which are 
required to place a license contract of the original license (S3101). 
Following this, the SP terminal application program 212 sends a 
license contract request S3102 including the entered user ID and 
original license ID to the CP license contract server 113. Receiving 

10 the license contract request S3102, the CP license contract server 
113 requests the CP license management server 114 to register the 
original license ID specified corresponding to the user ID included in 
the present request (S3103). In accordance with the original 
license ID registration request S3103, the CP license management 

15 server 114 records the original license ID into the DB in association 
with the user ID (S3104). After completing the recording into the 
DB, the CP license management server 114 returns an original 
license ID registration response S3105 including the result to the CP 
license contract server 113. Obtaining the original license ID 

20 registration response S3105, the CP license contract server 113 
sends the SP terminal application program 212 a license contract 
response S3106 including information regarding the CP license 
management server 114 from which the original license is obtained. 
Receiving the license contract response S3106, the SP terminal 

25 application program 212 shows the result of the license contract to 
the user (S3107). 

[0062] Although the billing processing for the license contract is 
not described in the present embodiment, the billing processing may 
be performed for the license contract, 
30 [0063] (Sequence of Original License Obtainment Processing) 

FIG. 32 is a sequence diagram for the original license 
obtainment processing performed between the content provider 11 
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and the service provider 21. As shown in FIG. 32, the present 
processing is carried out by the CP license managennent server 114, 
the SP terminal application program 212, and the SP license 
management server 214. It should be noted that the original 
5 license obtainment described here means that the service provider 
21 obtains the original license, for which the contract was placed in 
the above license contract processing, from the content provider 11. 
A detailed explanation is given as follows. 

[0064] The SP terminal application program 212 receives, from the 

10 user, a user ID, an ID of an original license desired to be obtained, 
and information regarding the CP license management server 114 
from which the original license is to be obtained (S3201). 
Following this, the SP terminal application program 212 sends an 
original license obtainment request S3202 including the entered 

15 user ID, original license ID, and information regarding the CP license 
management server 114 to the SP license management server 214. 
Receiving the original license obtainment request S3202, the SP 
license management server 214 sends an original license 
obtainment request S3203 including the user ID and the original 

20 license ID to the specified CP license management server 114. 
Receiving the original license obtainment request S3203, the CP 
license management server 114 checks to see whether or not the 
appropriate original license ID is registered in the DB in association 
with the specified user ID and, when it is registered, obtains data of 

25 the original license corresponding to the original license ID from the 
DB (S3204). When it is not registered, the CP license management 
server 114 sends an original license obtainment response S3206 
which includes information indicating that it is not to the SP license 
management server 214. FIG. 33 is a diagram showing a data 

30 structure of the original license after the license processing shown in 
FIG. 32 was performed. As shown in FIG. 33, after the data of the 
original license is obtained from the DB, the part of the content key 
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of the present original license data is encrypted using an encryption 
key that only the content key insertion processing unit 2144 of the 
SP license management server 214 can decrypt (D331), and 
signature data D332 of the CP license management server 114 is 
5 attached to the entire data of the original license (S3205). 
Following this, an original license obtainment response S3206, 
which includes the original license on which the attachment 
processing of S3205 was performed and the Information regarding 
the CP content management server 116 from which the encrypted 

10 content is obtained, is sent to the CP license management server 
214. Receiving the original license obtainment response S3206, 
the SP license management server 214 checks on the signature 
attached to the original license data and records the original license 
into the DB in association with the original license ID. After 

15 completing the recording into the DB, an original license obtainment 
response S3208 including the result of the original license 
obtainment processing is returned to the SP terminal application 
program 212. Receiving the original license obtainment response 
S3208, the SP terminal application program 212 shows the result of 

20 the original license obtainment processing to the user (S3209). 
[0065] (Sequence of Encrypted Content Obtainment Processing) 

FIG. 34 is a sequence diagram for the encrypted content 
obtainment processing performed between the content provider 11 
and the service provider 21. As shown in FIG. 34, the present 

25 processing Is carried out by the CP content management server 116, 
the SP terminal application program 212, and the SP content 
distribution server 216. It should be noted the encrypted content 
obtainment described here indicates that the service provider 21 
obtains the encrypted content, from the content provider 11, 

30 corresponding to the original license obtained in the above original 
license obtainment processing. A detailed explanation is given as 
follows. 
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[0066] From the user, the SP terminal application program 212 
receives an ID of the encrypted content which is to be obtained and 
information regarding the CP content management server 116 from 
which the encrypted content is to be obtained (S3401). After this, 
5 the SP terminal application program 212 sends an encrypted content 
obtainment request S3402 including the entered content ID and the 
information of the CP content management server 116 to the SP 
content distribution server 216. Receiving the encrypted content 
obtainment request S3402, the SP content distribution server 216 

10 sends an encrypted content obtainment request S3403 including the 
content ID to the designated CP content management server 116. 
Receiving the encrypted content obtainment request S3403, the CP 
content management server 116 obtains data of the encrypted 
content and meta information corresponding to the content ID 

15 (S3404). Following this, the CP content management server 116 
sends an encrypted content obtainment response S3405 including 
the obtained encrypted content data and meta information to the SP 
content distribution server 216. Receiving the encrypted content 
obtainment response S3405, the SP content distribution server 216 

20 records the encrypted content data and meta information into the 
DB in association the content ID (S3406). After completing the 
recording into the DB, the SP content distribution server 216 sends 
an encrypted content obtainment response S3407 including the 
result of the encrypted content obtainment processing to the SP 

25 terminal application program 212. Receiving the encrypted content 
obtainment response S3407, the SP terminal application program 
212 shows the result of the encrypted content obtainment 
processing to the user (S3408). 

[0067] (Sequence of Original License Information Reference 
30 Processing) 

FIG. 35 is a sequence diagram for the original license 
information reference processing performed by the service provider 
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21. As shown in FIG. 35, the present processing is carried out by 
the sales license generation tool 211 and the SP license 
management server 214. FIG. 36 is a diagram showing a data 
structure of original license information. It should be noted that 
5 the original license information described here refers to an original 
license in which the part of the content key is omitted (D361) from 
the original license shown in FIG. 33. A detailed explanation is 
given as follows. 

[0068] The sales license generation tool 211 receives, from the 

10 user, an ID of the original license to be referenced (S3501). 
Following this, the sales license generation tool 211 sends an 
original license information obtainment request S3502 including the 
original license ID to the SP license management server 214. 
Receiving the original license information obtainment request S3502, 

15 the SP license management server 214 obtains data of the original 
license corresponding to the original license ID from the DB (S3503). 
After the obtainment, the SP license management server 214 
deletes the part of the content key to generate the original license 
information (S3504). Then, the SP license management server 214 

20 sends an original license information obtainment response S3505 
including the generated original license information to the sales 
license generation tool 211. FIG. 37 shows an entry screen of the 
sales license generation tool shown in FIG. 2. Receiving the 
original license information obtainment response S3503, the sales 

25 license generation tool 211 generates a screen as shown in FIG. 37 
on the basis of the obtained original license information and 
presents it to the user (S3506). 

[0069] (Sequence of Sales License Generation Processing) 

FIG. 38 is a sequence diagram for the sales license 
30 generation processing performed by the service provider 21. As 
shown in FIG. 38, the present processing is carried out by the sales 
license generation tool 211, the SP license sales server 213, and the 
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SP license management server 214. FIG. 39 is a diagram showing 
a screen in which the edit condition is inputted in the entry screen of 
the sales license generation tool shown in FIG, 2. FIG. 40 is a 
diagram showing a data structure of the sales license (having no 

5 content key). A detailed explanation is given as follows. 

[0070] The user of the sales license generation tool 211 enters the 
edit condition of the sales license on the screen in FIG. 37 that is 
obtained after the execution of the above original license 
information obtainment processing, as shown by D3901 to D3904 in 

10 FIG. 39, and presses a sales license generation button D3905 
(S3801). As shown In FIG. 40, the sales license generation tool 211 
edits the template of the sales license Included in the original license 
in accordance with the entered edit condition to generate a sales 
license (having no content key) that includes no content key 

15 (S3802). Then, the sales license generation tool 211 sends the SP 
license management server 214 a sales license registration request 
S3803 including the generated sales license (having no content key) 
and the ID of the original license based on which the present sales 
license (having no content key) was generated. Receiving the sales 

20 license registration request S3803, the SP license management 
server 214 obtains data of the original license corresponding to the 
received original license ID from the DB (S3804). Then, the SP 
license management server 214 compares the sales condition of the 
received sales license (having no content key) with the edit 

25 condition of the original license obtained from the DB and judges 
whether or not the usage condition is within the range of the edit 
condition. FIG. 41 is a diagram showing a data structure of the 
sales license (having a content key). Here, when it is within the 
range of the edit condition, the SP license management server 214 

30 inserts the content key of the original license into the sales license 
(having no content key) to edit it into a sales license (having a 
content key) that includes a content key (S3805). Following this, 
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the SP license management server 214 registers the generated sales 
license (having a content key) into the DB (S3806) and returns a 
sales license registration response S3807 that includes information 
showing a normal termination to the sales license generation tool 

5 211. On the other hand, when it is not within the range of the edit 
condition, the SP license management server 214 returns a sales 
license registration response S3807 that includes information 
showing an abnormal termination to the sales license generation 
tool 211. Receiving the sales license registration response S3807 

10 showing the normal termination, the sales license generation tool 
211 requests the SP license sales server 213 to register the sales 
license ID and the meta information such as the usage condition 
(S3808). Receiving the meta information registration request 
S3808, the SP license sales server 213 records the meta information 

15 into the DB in association with the sales license ID (S3809). After 
completing the recording into the DB, the SP license sales server 
213 returns a meta information registration response S3810 to the 
sales license generation tool 211. Receiving the meta information 
registration response S3810, the sales license generation tool 211 

20 presents information showing the result of the sales license 
generation processing to the user (S3811) 

[0071] As described so far, according to the present B2B2C system, 
unless the usage condition of the sales license that is to be sold to 
the end user 31 by the service provider 21 complies with the range 

25 of the edit condition of the original license set by the content 
provider 11, the sales license having the content key cannot be 
generated. To be more specific, using the present invention, it 
becomes possible for the content provider 11 to control the usage 
condition of the sales license generated by the service provider 21. 

30 [0072] FIG. 42 is a diagram showing timing in comparing the 
usage condition and the edit condition. FIG. 43 is a diagram 
showing a case where the timing In comparing the usage condition 
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and the edit condition is when the sales license is issued. In the 
present embodiment of the present invention, an example has been 
described for a case where the usage condition of the sales license to 
be sold and Issued to the end user 31 is designated and set by the 
5 service provider 21 in advance of sale, as shown in FIG 42. 
However, note that the case is not limited to this and the usage 
condition may be designated and set by the end user 31 at the point 
of sale as shown in FIG. 43. 

[0073] In the embodiment of the present invention, an example 
10 has been described for a case where the comparison-judgment 
processing performed on the usage condition of the sales license 
and the edit condition of the original license is carried out in the 
subsystem of the service provider 21 when the sales license is 
registered into the database, as shown in FIG. 42. However, the 
15 case is not limited to this and the processing may be performed 
when the sales license is issued to the terminal device of the end 
user 31. 

[0074] FIG. 44 is a diagram showing a case where the timing in 
comparing the usage condition and the edit condition is when the 

20 sales license is received. FIG. 45 is a diagram showing a case 
where the timing in comparing the usage condition and the edit 
condition is when the content is used. The comparison-judgment 
processing is not limited to being performed in the subsystem of the 
service provider 21. As shown in FIGs. 44 and 45, the edit 

25 condition may be obtained from the subsystem of the service 
provider 21 or the content provider 11, and the processing may be 
performed by the terminal device of the end user 31 when the sales 
license is received or when the content is used. 

[0075] Moreover, in the embodiment of the present invention, an 
30 example has been described for a case where the subsystem of the 
service provider 21 temporarily obtains the content key as data 
included in the original license from the subsystem of the content 
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provider 11, then distributes the content key to the ternninal of the 
end user 31 by including it in the sales license. However, the case 
is not limited to this, and the subsystem of the content provider 11 
may distribute it to the terminal of the end user 31. 
5 [0076] Furthermore, in the embodiment of the present invention, 
an example has been described for a case where the subsystem of 
the service provider 21 temporarily obtains the encrypted content 
from the subsystem of the content provider 11, then distributes It to 
the terminal of the end user 31. However, the case is not limited to 
10 this, and the subsystem of the content provider 11 may distribute It 
to the terminal of the end user 31. 

[0077] (Case Where Edit Condition and Sales Condition are Tied) 
In the above embodiment, the sales license Is created on 
the basis of the edit condition, and the sale of the license is only 

15 limited under the common sales condition that all the sales licenses 
have to follow regardless of the edit condition. However, the 
present invention is not limited to this. FIG. 46 is a diagram 
showing an example of a case where the number of sales licenses is 
limited in accordance with the edit result of the sales license. As 

20 shown in this diagram, the editable usage condition and the 
maximum number of sales of the sales license corresponding to the 
present edit result are described as the sales condition of the 
original license. To be more specific: when the number of 
reproduction times after the edit is three, the licenses up to and 

25 including 100 can be sold; when the number of reproduction times 
after the edit is four, the licenses up to and Including 80 can be sold; 
and the number of reproductions times after the edit is five, the 
licenses up to and including 60 can be sold. As the edit condition, 
the range of the editable usage condition, that is, the range of the 

30 number of reproduction times, is described to be editable between 
three times at the minimum and five times at the maximum. Thus, 
when the SP license management server 214 edits the number of 
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reproduction times of the sales license as four times, for example, 
the allowed number of sales of the license is up to and including 80. 
The control unit 2134 of the SP license sales server 213 receives a 
notification of the sales condition and the edited condition of the 
5 generated sales license as shown in FIG. 46 from the sales license 
generation tool. The control unit 2134 of the SP license sales 
server 213 counts the number of sales every time the present sales 
license is sold and, when the number reaches the number of sales 
corresponding to the notified usage condition, terminates the sale of 

10 the sales license. It should be noted that, as a sales method of the 
sales license in this case, the SP license sales server 213 does not 
sell the license by receiving designation of the number of 
reproduction times as a usage condition from the end user, but sells 
a license whose number of reproduction times is uniform (three 

15 times, for example). An example has been described here for a 
case where the service provider 21 selects only one number of 
content reproduction times from the range shown as the edit 
condition and sells the end user 31 the sales license up to the 
number corresponding to the selected reproduction times. 

20 However, a sales method like this should be established through a 
contract between the content provider 11 and the service provider 
21, and is not always limited to the example described here. For 
instance, it should be understood that the SP license management 
server 214 may sell the sales licenses whose respective allowed 

25 numbers of reproduction times are three, four, and five, with their 
number of sales respectively being up to 100, 80, and 60 which 
amounts to a total of 240 licenses. Moreover, in this case, the 
number of reproduction times can be designated by the end user 31 
and the sales licenses corresponding to the designated number of 

30 reproduction times can be sold. Furthermore, when the number of 
sales licenses corresponding to the designated number has reached 
its maximum number of sales, the terminal device of the end user 31 
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may be informed so and the sales licenses that have not reached 
their maximum number of sales may be sold. 

[0078] (Data Structure of Sales License in the Case of Double 
Checking) 

5 In the above description, the comparison-judgment 

processing for the edit condition may be performed in the subsystem 
of the service provider 21 or may be performed by the terminal 
device of the end user 31 as shown in FIGs. 44 and 45. However, 
the case is not limited to that only one of the service provider 21 and 

10 the end user 31 performs the comparison-judgment processing. 
The processing may be performed by both the service provider 21 
and the end user 31. FIG. 47 is a diagram showing a data flow of a 
case where the comparison-judgment processing is performed for 
the edit condition by both the SP and the EU. As shown In this 

15 diagram, in the case of the SP, the content key insertion processing 
unit 2144 serves as an SP check module, which compares the usage 
condition of the sales license (having no content key) received from 
the sales license generation tool 211 with the edit condition of the 
original license on which the sales license was based and judges 

20 whether or not the usage condition is within the range of the edit 
condition. Only when it is judged to be within the range of the edit 
condition, the content key included in the original license is inserted 
into the sales license (having no content key) so that a sales license 
(having a content key) is generated. In the above embodiment, the 

25 EU only uses the content by employing the sales license obtained 
from the SP. For this reason, the sales license to be generated did 
not need to include the edit condition. On the other hand, when the 
checking is conducted by both the SP check module and the terminal 
device of the EU, the edit condition is inserted into the sales license 

30 (having a content key) as shown in FIG. 47. The EU is composed of 
a check module which is a tamper resistant module provided by the 
CP. After obtaining the sales license from the SP, the check module 
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of the EU compares the edit condition and the usage condition 
included in the sales license and judges whether or not the usage 
condition is within the range of the edit condition. As a result of the 
judgment, when the usage condition is within the range of the edit 
5 condition, the original license is stored into a secure storage unit. 
In other cases, the obtained original license is abandoned. 
[0079] (Structure of EU Terminal Device Provided with a Function 
for Checking Sales License) 

FIG. 48 is a block diagram showing the structure of an EU 

10 terminal device 480 that compares the edit condition and the usage 
condition included in the sales license in order to make a judgment. 
As shown in this diagram, the EU terminal device 480 is composed of 
a communication processing unit 481, a control unit 482, a contract 
condition comparison unit 483, a DB I/F 484, and a license DB 485. 

15 The communication processing unit 481 is a module which: 
transmits a license obtainment request from the user, that was 
received by a not-illustrated entry I/F, to the SP license 
management server 214 via the transmission line B51; and receives 
the appropriate sales license (having a content key) as a response. 

20 The control unit 482 is a module which controls the processing to be 
performed to compare the edit condition and the usage condition of 
the sales license received from the SP license management server 
214. In accordance with the judgment result given by the contract 
condition comparison unit 483, the control unit 482 stores the sales 

25 license into the license DB 485 via the DB I/F 484 only when the 
usage condition of the sales license is within the range of the edit 
condition. In other cases, the received sales license is abandoned. 
The contract condition comparison unit 483 compares the edit 
condition and the usage condition of the received sales license to 

30 judge whether or not the usage condition is within the range of the 
edit condition, and notifies the control unit 482 of the judgment 
result. The DB I/F 484 is a module which stores/read data 
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into/from the license DB 485 that is a secure storage unit. The DB 
I/F 484 stores the sales license obtained from the control unit 482 
into the license DB 485. When the content is reproduced, the DB 
I/F 484 reads out the license stored in the license DB 485 and 

5 transmits it to the control unit 482 or a not-illustrated content 
reproduction unit, under the direction of the control unit 482. 
[0080] FIG. 49 is a diagram showing another example of timing In 
comparing the usage condition and the edit condition included in the 
sales license. The following is an explanation of a processing 

10 procedure In a case where both the service provider 21 and the end 
user 31 perform checking, with reference to FIGs. 48 and 49. As 
shown In these figures, the content provider 11 transmits the 
original license including the edit condition to the service provider 
21. The service provider 21 temporarily records the original license 

15 obtained from the content provider 11 into the license DB 2146. 
Then, the sales license generation tool 211 edits the template 
included in the original license, so that the sales license (having no 
content key) is generated- Next, the content key insertion 
processing unit 2144 compares the usage condition included in the 

20 sales license (having no content key) after the editing with the edit 
condition of the original license. When the usage condition after 
the editing is within the range of the edit condition, the content key 
is inserted Into the sales license (having no content key). The sales 
license Into which the content key was inserted is recorded into the 

25 license DB 2146. When the end user 31 Is to purchase this sales 
license, the designated sales license is read out from the license DB 
2146 and issued to the end user 31 after the signature is attached to 
it. In this case, the service provider 21 issues the sales license that 
allows the content designated by the end user 31 to be reproduced 

30 under a predetermined usage condition, and do not accept the 
designation of the usage condition from the end user 31. Moreover, 
the sales license issued here by the service provider 21 includes the 
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edit condition. When the EU terminal device 480 of the end user 31 
(1) obtains the sales license issued by the communication 
processing unit 481, (2) the obtained sales license is sent to the 
contract condition comparison unit 483 via the control unit 482. 

5 (3) The contract condition comparison unit 483 compares the edit 
condition and the usage condition included in the sales license sent 
from the control unit 482 and (4) returns it to the control unit 482 
only when the usage condition is within the range of the edit 
condition. (5) (6) The control unit 482 records the sales license 

10 into the license DB 485 in the EU terminal device 480 via the DB I/F 
484. 

[0081] As described so far, according to the present B2B2C system, 
unless the usage condition of the sales license to be sold by the 
service provider 21 to the end user 31 complies with the edit 

15 condition of the original license set by the content provider 11, a 
sales license including a content key cannot be generated. In 
addition to this, the end user 31 also performs checking as to 
whether the usage condition of the sales license complies with the 
edit condition and abandons the sales license having the usage 

20 condition which does not comply with the edit condition. On the 
account of this, even if the service provider 21 generates a sales 
license which does not comply with the edit condition of the original 
license despite the intention of the content provider 11, the end user 
31 cannot use the content. Therefore, the present invention allows 

25 the content provider 11 to more forcefully control the usage 
condition of the sales license generated by the service provider 21. 
[0082] It should be noted that the service provider 21 of the 
present invention is not limited to a broadcast station or a provider 
that sells content on the Internet, and may be a provider that rents 

30 content recorded on a record medium, such as a DVD or a CD. In 
such a case, the service provider 21 may receive the edit condition 
and the sales condition of the sales license for each set of content 
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from the content provider 11 via a communication network or the 
like. Alternatively, the edit condition and the sales condition may 
be recorded on the record medium such as a DVD that stores the 
content to be rented. In this case, the terminal device of the end 
5 user 31 reproduces the content in accordance with the sales license 
issued by the service provider 21. Here, the terminal device of the 
end user 31 may compare the usage condition included in the sales 
license with the edit condition recorded on the record medium that 
stores the content, and judge whether or not the usage condition 
10 included in the sales license is within the range of the edit condition 
recorded on the record medium. Only when the usage condition 
included in the sales license is within the range of the edit condition 
recorded on the record medium, the content may be reproduced. 
In other cases, the sales license may be abandoned. 

15 

Industrial Applicability 

[0083] The right management device used in the B2B2C system of 
the present invention is useful as a right management device used in 
a system whereby, when a service provider generates a sales license 
20 to be sold to an end user, a content provider can control a usage 
condition of the sales license generated by the service provider with 
forcing that does not allow a content key to be inserted unless the 
usage condition of the sales license is set within the range of an edit 
condition of an original license set by the content provider. 
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